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WE CLAIM: 

1 . A method for multiplying an elliptic curve point Q(x,y) by a scalar to provide a point 
kQ, the method comprising the steps of: 

a) selecting an elliptic curve over a finite field F such that there exists an 
endomoiphism \\f where ij;(Q) =a.Q for all points Q(x,y) on the elliptic curve, and 
y? is an integer, 

b) establishing a representation of said scalar k as a combination of components ki 
said integer JL 

c) combining said representation and said point Q to form a composite representation 
of a multiple corresponding to kQ and 

d) computing a value corresponding to said point kQ from said composite 
representation of kQ. 

2. A method according to claim 1 wherein each of said components kj is shorter than 
said scalar k. 

3. A method according to claim 1 wherein said components k, are initially selected and 
subsequently combined to provide said scalar k. 

4. A method according to claim 1 wherein said representation is of the form 

I- 

= ^^yv2' mod n where n is the number of points on the elliptic curve. 

#-0 

5. A method according to claim 4 wherein said representation is of the form ko + kj. 

6. A method according to claim 1 wherein said scalar k has a predetermined value and 
said components k. 

7. A method according to claim 3 wherein said value of said multiple kQ is calculated 
using simultaneous multiple addition. 

8. A method according to claim 7 wherein grouped terms Gi utilized in said 
simultaneous multiple addition are precomputed. 
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9. A method according to claim 6 wherein said components k, are obtained by obtaining 
short basis vectors (Uo, Ui) of the field F, designating a vector v as (k,0), converting v 
from a standard, orthonomal basis to the (Uo,Ui) basis, to obtain fractions j^/l 
representative of the vector v, applying said fractions to k to obtain a vector z, 

5 calculating an 

efScient equivalent v to the vector v and using components of the vector v in the 
composite representation of kQ. 

10. A method of generating in an elliptic curve cryptosystem a key pair having a integer k 
10 providing a private key and a pubhc key kQ, where Q is a point on the curve, 

a) selecting an elliptic curve over a finite field F such that there exists an 
endomorphism v|/ where \\f(Q) = XQ for all points Q (x,y) on the elliptic curve, 
X. is an integer, 

b) establishing a representation of said key k as a combination of components ki 
1 5 and said integer X, 

c) combining said representation and said point Q to form a composite 
representation of a multiple corresponding to the public key kQ and 

d) computing a value corresponding to said key kQ from said composite 
representation of kQ. 

20 11. A method according to claim 1 0 including a method according to any one of claims 2 
to 9. 
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